What is the advantage of this over SpiderOak?
https://spideroak.com/solutions/spideroak-one
> SpiderOakONE is the leading private backup solution and is 100% Zero Knowledge. Get a ton of space for only $12 a month.
To me, it seems like a more expensive version.
Take a look at SpiderOak's privacy policy, under the "Disclosure" section (https://spideroak.com/policy/privacy-policy):
>SpiderOak's policy is to notify a user of a request for their personal data stored on our servers prior to disclosure unless prohibited from doing so by statute or court order [e.g. U.S.C. § 2705(b)].
That would be NSLs.
SpiderOak offers encrypted backups. This is a good thing. It doesn't specify how it's stored on their end (presumably because it doesn't matter to the end user). So that's an unknown.
Bytejail offers encrypted anonymous backups (via Tor Hidden Service) and uses a TahoeLAFS backend. My understanding of TahoeLAFS is that it's excellent. So if you're security-conscious, Bytejail would seem like a better choice.
(I'm not familiar enough with SpiderOak to comment on their offering in detail; I can only really go off the page you linked.)
Its local encryption then copies the resulting blob to SpiderOak. Lose your password, lose your ability to decrypt as you need it to decrypt locally.
Bytejail uses X25519 + Xsalsa20Poly1305.
SpiderOak uses RSA-2048 + AES-256. (Is it AES-256-CTR + HMAC-SHA2 or is it AES-256-GCM? That page doesn't specify.)
Bytejail uses scrypt. SpiderOak uses PBKDF2-SHA256 with 16384 iterations.
My earlier comment was saying: Bytejail uses TahoeLAFS on the backend after receiving encrypted blobs. SpiderOak uses ________?
Again, to clarify: This isn't a crticism of SpiderOak. I just literally don't know what they are doing from the pages people have linked to in this thread.